General
- Target 2026-07-05_4a364e97946c2bd0a7bccf1ccae77fbc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- Sample260705-b28gtsbz6j
- SHA256 1008016691f665bbe6374385f8976852c11bfe997051fd66fc6ba4d9d2a22ee7
- MD5 4a364e97946c2bd0a7bccf1ccae77fbc
- SHA1 abe00b82fc803de3956fed06acae21106542c74c
- SHA512 827eac97e7ecc663da474f17b054ce36cd00e07a24d5118fae787e9673eba21e38de358a8758afaf3e15a98f179b64a5a0d5de1b538277b974bcc694a1fe172b
- SSDEEP 24576:6Xc29+ICgpB5GBrMVyJWrwgh5AQorrYWbJ6HPt6B:ec2kATGBrMGWr7nTC8HPS
- TLSH T17905F12AB79088FDEC27C17CC9B2C411EA3278550360EADB53544A661F377D46E3EB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_4a364e97946c2bd0a7bccf1ccae77fbc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_4a364e97946c2bd0a7bccf1ccae77fbc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- SHA256 1008016691f665bbe6374385f8976852c11bfe997051fd66fc6ba4d9d2a22ee7
- MD5 4a364e97946c2bd0a7bccf1ccae77fbc
- SHA1 abe00b82fc803de3956fed06acae21106542c74c
- SHA512 827eac97e7ecc663da474f17b054ce36cd00e07a24d5118fae787e9673eba21e38de358a8758afaf3e15a98f179b64a5a0d5de1b538277b974bcc694a1fe172b
- SSDEEP 24576:6Xc29+ICgpB5GBrMVyJWrwgh5AQorrYWbJ6HPt6B:ec2kATGBrMGWr7nTC8HPS
- TLSH T17905F12AB79088FDEC27C17CC9B2C411EA3278550360EADB53544A661F377D46E3EB92
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1